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[57] ABSTRACT 

A television schedule system with a user interface which 
allows a user to control access to television programs by 
time, rating, content, and/or channel. Criteria for blocking 
television programs from being viewed are entered by a user 
with a password. A television program listing is selected for 
viewing or recording from an on-screen program guide. A 
viewer is prompted on the screen to enter a password if the 
selected program meets the blocking criterion, If a viewer 
enters the appropriate password, the selected program that 
meets the blocking criterion is unblocked. The blocking 
criterion is restored after the program is over or the program 
is no longer tuned to. Furthermore, the user may set a limit 
on pay-per-view (PPV) spending to limit the purchase of 
PPV programs, 
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TELEVISION SCHEDULE SYSTEM WITH FIG. 2A shows a preferred embodiment of a pop-up menu 

ACCESS CONTROL shown to a user if a password has not been established, and 

the user selects parental control from the main menu of a 
BACKGROUND OF THE INVENTION television schedule guide; 

The present invention relates to a system for providing 5 FIG. 2B shows a preferred embodiment of a parental 

television schedule information, and more particularly to a control menu shown to a user after a parental password has 

television schedule information guide with capability for been established and entered; 

controlling access to television programs. FIG. 2C shows a preferred embodiment of a pop-up 

Systems are available for providing television schedule shown when the user selects a "lock by channel" feature; 

information to a user. For example, U.S. Pat. No. Bl 10 ^IG. 2D shows a preferred embodiment of a pop-up 

4,706,121 (Young), provides a television schedule system shown when the user selects a « lock by rating and content" 

and process. In one embodiment of Young, the television feature* 

schedule information is provided on the user's television FIG ' 2E shQWS a ferred embodiment of a pop .„ p 

scree^ The user may supply selection criteria which are shown when ^ ^ a 1<lockb time „ fea , 

utilized by the Young system to make program selections, 1J . , .. 

and the like. In addition, Young discloses a system which 2F shows » P refer " d embodiment of a pop-up 

controls a television receiver to allow for automatic selec- show ° *»• T * a P T ± c°' 

tion of programs and the automatic, unattended recording of f sti ^ ed > and ^ sele , cts . a . Set ,PPV Spending 

programs that are listed in the television schedule informa- himts feature ftom the con,ro1 v,ewm 6 mcm > 

tion guide. The automatic, unattended recording of programs 20 FIG' 2G shows a preferred embodiment of a pop-up 

is achieved by controlling a videotape recorder (VCR) or shown to a user if a purchase password has been established, 

other recording device. an d the user selects the "Set IPPV Spending limits" feature 

from the control viewing menu; 

SUMMARY OF THE INVENTION FIG. 2H shows a preferred embodiment of a IPPV spend- 

The present invention is directed to a television schedule 25 ing limit pop -up shown to a user after a proper purchase 

system with a user interface that allows a user to control password has been established and entered; 

access to television programs by time, rating, content, and/or FIG. 3 is a process flow chart for determining whether a 

channel. Furthermore, the user may set a limit on pay-per- US er could tune to a program; 

view (PPV) spending to limit the purchase of PPV programs. 3o FIG. 4 is a process flow chart for the operation of the 

In a preferred embodiment, the television schedule system parental control feature; 

has a main menu. A user may select the "Parental Control" fig. 5 is a process flow chart for the operation of the 

(parental control) menu from the mam menu to enter the purchase control feature; 

parental password. The parental password may be estab- _ . . a , A c . , , 

hshed from the main menu. After establishing and entering „ y FIG. 6 is a process flow chart for verifying a password and 

the parental password, the user may lock-out programs by 35 hm * m ? a number of / ies m enterm S the P 8 ™* 1 

channel, by rating, content, and/or by time from the parental 00111101 or V™*" 3 * P assword ; 

control menu. The content description of the show may FIG - 7 15 a process flow chart for determining whether a 

further have a corresponding "V-chip" classification based program has a restricted V-chip classification, and whether 

on V-chip rating data supplied by the FCC. Hence, the user access shcmld be allowed; 

may further lock out programs by V-chip classification. In FIG. 8 is a process flow chart for changing the parental 

order to tune to a locked program, the parental password is control or purchase password; 

preferably supplied. FIG. 9 is a process flow chart for establishing the parental 

In one embodiment, the user may select a "control view- control or purchase password; and 

ing" menu from the main menu to enter a purchase pass- 45 FIG. 10 is a process flow chart for removing the parental 

word. tEhe^ ujyhase^ control or purchase password, 
the main menu. After establishing and entering the purchase 

password, the user may specify a PPV spending limit DESCRIPTION OF PREFERRED 
thereby limiting the purchase of PPV programs. The use| EMBODIMENTS 
may further specify the type of PPV programs allowed baseS 50 The present invention provides a television (TV) schedule 
on rating and content. In order to purchase beyond tbS system with capability for controlling access to TV pro- 
spending limit, the purchase password is preferably supl grams. FIG. 1 illustrates a preferred embodiment of TV 
plied. In order to pu rchase_je strjcted pr ogra ms, bo th tbg system 1 in which the invention may be utilized. As shown, 
^pare'n'i'a'i'a'nu^^^^ system 1 includes a distribution center 10 and multiple 

If the user does not remember a password, the user may, 55 receiving locations, 

for example, call the cable operator. The cable operator may Distribution center 10 compiles data for a data-stream. In 

set the password to null so the user may establish a new a preferred embodiment, this data-stream is broadcast to 

password. receiving locations 16, 18, 20, and 22. Several methods are 

Other features and advantages of the present invention available for broadcasting the data-stream from distribution 

will become apparent to those skilled in the art upon a 60 center 10 to receiving locations 16-22. For example, satel- 

perusal of the remaining portions of the specification and lite 15 may broadcast this data-stream within the vertical 

drawings. In the drawings, like reference numerals indicate blanking interval (VBI) of a television channel (e.g., PBS) 

identical or functionally similar elements. or a dedicated channel to receiving locations 16, 18, 20, and 

22. Alternatively, the data may be broadcast out of band, i.e. . 

BRIEF DESCRIPTION OF THE DRAWINGS 65 using non ch * ncl spe J c mechanis[ns . In ano ' thc ; 

FIG. 1 illustrates a preferred embodiment of a television embodiment, the data-stream is provided to receiving loca- 
system according to the present invention; tions 16, 18, 20, and 22 via transmission line 13. Transmis- 
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sion line 13 may be, for example, optical fiber, coax cable, 
telephone line, or the like. In yet another embodiment, 
peripheral devices, which are located within the receiving 
locations, receive the data -stream from, for example, a local 
service provider 40. Service provider 40 receives the data- 5 
stream from distribution center 10 via line 17, and broad- 
casts the data-stream to the receiving peripheral devices via 
satellite 15 (or another satellite), or via lines 19 and 13. The 
receiving peripheral devices may be televisions 30, televi- 
sions 34, VCRs 32, VCRs 36, and/or set-top boxes 38. In 
still further embodiments, PCTVs may be utilized, or the 
data-stream may be provided to a personal computer for use 
with the computer and/or more of the above devices. 

In the preferred embodiment, information in the data- 
stream includes TV schedule information. Software located 
within the peripheral devices utilize the schedule informa- 15 
tion provided in the data-stream to generate a TV schedule 
guide. The software is stored on a computer-readable storage 
medium 42 such as a ROM, RAM, disk, or other storage 
device. If the TV schedule guide is in a grid format, for 
example, the available channels may be listed on the "y" 20 
axis and various times may be listed on the "x" axis. The 
user may tune to a program within the TV schedule guide by 
highlighting the program within the guide, and selecting the 
program. The user may also select one or more desired 
programs which are listed in the TV schedule guide for 25 
automatic, unattended recording. For more information on 
how the TV schedule system displays information, and its 
tuning and automatic recording capabilities, see U.S. Pat, 
No. Bi 4,706,121 and U.S. Pat. No. 5,151,789. Both these 
patents, like the present patent application, are assigned to 30 
StarSight Telecast, Inc., and are hereby incorporated by 
reference in their entirety for all purposes. 

The system further has the capability of preventing view- 
ers from tuning to or viewing one or more TV programs. TV 
programs may be blocked by channel, rating, content, and/or 35 
time. If the user turns on the TV during a locked time, or 
tunes to a channel with a show that contains the locked 
rating or content/V-chip classification (for example), the 
television schedule system mutes the audio and displays a 
solid blue screen over the TV screen. A pop-up will appear 40 
asking for the parental password. The solid blue screen will 
disappear, and mute will be disabled when the correct 
password is entered. 

FIG. 2 A shows a preferred embodiment of pop-up 52 
shown to a user if a password has not been established, and 45 
the user selects parental control from main menu 50. The 
various menus and pop-ups of the system may be shown as 
partial screens overlaying underlying full screens, or they 
may be shown as full screens. As shown, the user is asked 
to create a parental password by pressing a SELECT key. 50 
The SELECT key may also be the ENTER key, and may be 
on a user input device, or it may be located on the TV 
schedule guide and entered by directing a cursor to a screen 
button. If the SELECT key is on the TV schedule guide, a 
user may highlight it on the guide and input it by pressing 55 
an enter key, or any key that functions as an enter key on the 
user input device. Other keys that may be located on the user 
input device or the TV schedule guide include the CANCEL 
key, the RECkey, and the EXITkey. Up, down, left and right 
arrow keys are preferably included to allow a user to eo 
navigate and make selections within the pop-up menus. 
However, any key combinations which allow a user to 
navigate within the pop-up menus may be used. The parental 
password may be established from main menu 50 by striking 
the SELECT key. 65 

FIG. 2B shows a preferred embodiment of parental con- 
trol menu 54 shown to a user when a parental password has 



748 

4 

been established, from main menu 50, and the user has 
entered the correct password. The user may lock TV pro- 
grams by channel, by rating and/or content, or by time. If the 
user desires, for example, to lock by time, the user may 
move the cursor to the "Lock by Time" location and inputs 
the SELECT key. Alternatively, if programs have been 
locked, the user may unlock all programs that have been 
locked. 

FIG. 2 C is a preferred embodiment of pop -up 56 shown 
when the user selects the "lock by channel feature." In the 
preferred embodiment, pop-up 56 includes a list of all 
channels available to the user. If the user has more channels 
than will fit in pop -up 56, indicators or scroll bars will be 
shown at comers of the pop-up instructing the user to move 
further right or further down to display more channels. The 
user may use the previously mentioned arrow keys to 
navigate within pop-up 56. A channel is locked after a user 
highlights and selects the channel. A lock symbol will be 
placed next to the channel icon to indicate that the channel 
is locked. To unlock a channel, the user may highlight and 
select the locked channel. The lock symbol next to the 
channel icon will then disappear to indicate the lock is 
removed. The user may use the EXIT key to return to pop-up 
54 of the parental control menu. 

Since the system stores program information, it is able to 
determine whether a current or future program is shown on 
a restricted channel. The system may also determine whether 
a program falls within a restricted rating and/or content, 
V-chip classification, or time period. Hence, if a lock is 
placed on a channel on which there are programs scheduled 
for recording, a pop-up will appear warning the user of the 
conflict. If the user ignores the pop-up, it will time out in 
three seconds, the channel will be locked, and the recording 
will occur without the need for a password as it was set 
before the lock was enabled. Once a channel is locked, a user 
may not tune to, record, or purchase any program on that 
channel unless the user enters the correct password. 
However, upon entering the correct password, the user may 
schedule recording of future programs. At the time of the 
scheduled recording, the system unlocks the locked channel, 
tunes to the channel, and records the program. When the 
program is over, the system relocks the channel. 

FIG. 2D is a preferred embodiment of pop-up 60 shown 
when the user elects to lock programs by rating and/or 
content. As can be seen, two lists are shown to the user, one 
by rating, and one by content. The user may lock by content 
and/or rating by highlighting the relevant content and/or 
rating on the pop-up and inputting the SELECT key. Pro- 
grams may be locked using more than one category of rating 
and/or content. Furthermore, the content description on 
pop-up 60 may include information corresponding to data 
supplied by the V-chip. The V-chip data may be enclosed 
within parenthesis and will indicate the V-chip attribute 
classification of the program. For example, the content 
category "Violence" may have corresponding V-chip 
attribute mildly violent (V2), moderately violent (V3), and 
the like. When the user locks shows according to rating, all 
higher ratings are automatically locked. Since the show 
contents are not listed in order of severity, locking one 
content does not automatically lock any others. 

The user may also lock specified time periods to prevent 
TV viewing during those times. The user may further specify 
the frequency of the lock, e.g., for a single day, for Monday 
through Friday only, weekends only, or for every day of the 
week. FIG. 2E shows pop-up 62, which requests user input 
for the time period during which TV viewing should be 
prevented. As shown, the user may specify the time to begin 
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locking (the default time is 2:30 pm), the time to end locking Alternatively, the user may unlock individual programs 

(the default time is 5 pm), and the frequency of the lock (the by tuning directly to the programs from either the TV or the 

default frequency is for a single day). In the situation where TV schedule guide, and entering the correct password. If the 

the user has set these values before, the system remembers user tunes to a locked channel, the system displays a blue 

the values and displays them when pop -up 62 is shown, 5 screen over the TV screen, and mutes the audio. A pop-up 

If TV viewing is attempted during a locked period, the will appear requesting the parental password. If the correct 

system will mute the audio, and display a blue screen over password is supplied, the system removes the blue screen 

video. A pop-up will appear asking for the parental pass- and restores the audio. However, in this case, when the user 

word. When the correct password is entered, the solid blue tunes off a previously locked channel, the parental lock will 

screen will disappear, and audio will be re-enabled. If a lock 1Q be automatically restored. Hence, if the user tunes off the 

is placed on a time period during which there are programs locked channel, and then tunes back, the user must re-enter 

scheduled for recording, a pop-up will appear warning the the password to view the locked channel, 

user of the conflict. If the user ignores the pop-up, it will To access individual locked programs from the guide, the 

time out in three seconds, the channel will be locked, and the user may se j ect whichever locked program the user wishes 

recording will occur without the requirement of a password t0 view by highlighting it on the guide, and inputting the 

as it was set before the lock was enabled. However all future SELECT key. A password pop-up will appear. If the user 

recordings scheduled during the locked period will require a enters tfae passwordj the system tunes to the charmcl 

passwor r with me desired program. The user may also input the 

FIG. 2F shows a preferred embodiment of pop-up 64 SELECT key for more than 1 second, and a pop-up will 

shown to a user if a purchase password has not been ^ ^ ^ whethef tune of record ^ 

established, and the user selects the Set IPPV Spending 20 . , , TT7 . iU . , , 4 . 

limits" feature from control viewing menu 66. IPPVstands lockcd P 10 ^ me user ^ madc a selcctl ^ D ' * e 

for impulse pay-per-view, and refers to PPVprograms which pop-up will appear and the user may enter the 

are purchased via a user input device, for example, a remote password. After the correct password has been entered, the 

control. It is different from traditional PPV programs which s y stem ^ either tune to or rccord the locked program, 

require the user to call the program provider on a phone to 25 Instead of . in P utun g thc SELECT key and selecting the 

purchase the program. The user may establish the purchase record option on the pop-up, the user may also highlight a 

password, from main menu 50, by inputting the SELECT locked program and input the REC key to request recording 

key either by pressing the key on the user input device, or of the program. Recording will proceed when the user has 

selecting it on the TV schedule guide. FIG. 2G shows a supplied the correct password. 

preferred embodiment of pop-up 68 shown to a user if a 30 FIG. 3 illustrates a process flow chart for determining 

purchase password has been established, and the user selects whether a user could tune to a program. In preferred 

the "Set IPPV Spending limits'" feature from control viewing embodiments, the various processes described herein oper- 

menu 66. Id this case, the user would simply enter the ate under software control, such software being stored on a 

purchase password and input the SELECT key. As shown in computer readable storage medium. In a preferred 

FIG. 2G, if the user made a mistake, the user may input the 35 embodiment, the system has checked whether a parental 

CANCEL key and re -enter the password. password is necessary at step 100. At step 102 the system 

Once the purchase password has been established and determines whether the user has supplied the correct paren- 

entered, the user will see IPPV spending limit pop-up 70 (as tal password. If the correct parental password has been 

shown in FIG. 2H), and the user may enter the total dollar entered, the process will check whether the program is a free 

amount to which IPPV spending should be limited before the 40 event at step 104. A free event is a non pay-per-view event, 

system requires a password to enable purchasing. The If the event is free, the system will tune to the program at 

default spending amount is zero, in which case, the user step 110. If the event is not free, the system will request that 

needs to enter the purchase password for all purchases. the user enter the purchase password at step 106. At step 

Where a dollar amount greater than zero is set, this is the 108, the password entered is verified. If the password is 

amount the user may spend before the purchase password is 45 correct, the system will tune to the program at step 110. For 

required to make additional purchases. To set the amount, both verifying steps 102 and 108, if incorrect passwords are 

the user may input the right arrow key, and with each input supplied, the system will not tune to the program requested, 

of the right arrow key, a dollar would be added to the limit. FIG. 4 illustrates a process flow chart for the operation of 

To decrease the amount, the user may use the left arrow key. the parental control feature. When a user turns on the TV, or 

The user may use the arrow keys to reset the dollar amount 50 tunes to a program or channel, the system checks at step 150 

whenever desired. whether a parental password is needed before the program(s) 

To access a locked program, the user may select the will be shown. If a parental password exists, a step 152 of 
"Unlock All Locks" feature from parental control menu 54, the system checks whether a BOX lock has been set. A BOX 
and all locked programs will be unlocked. Alternatively, the lock is essentially a special TIME lock as it keeps the TV 
user may unlock all locks from the television schedule 55 locked for 24 hours a day, everyday. If a BOX lock exists, 
information guide by inputting the SELECT key for about 1 a step 154 displays a pop-up informing the viewer that a 
second while within the guide. A pop -up will appear, and the password is necessary before the viewer may watch TV, and 
user may choose the "Unlock All" option. The system will a step 172 requests that the user enters the parental pass- 
ask the user for the parental password, and upon entering the word. When the user supplies the correct password, the user 
correct password, the user may tune to all programs on all 60 may tune to the program, schedule an auto-tune, or schedule 
the available channels. While the programs are unlocked, the a recording of the program at step 168. 
"Unlock All Locks" feature toggles and becomes the If a BOX lock has not been set, the system checks for 
"Relock All Locks" feature and the gray lock symbols in the channel locks at step 156. If none exists, a step 158 checks 
guides become red unlocked lock symbols. The user may for a TIME lock. If a TIME lock exists, a step 170 checks 
relock all the previously locked programs by selecting 65 whether the current time is within the range of the restricted 
"Relock All Locks" from parental control menu 54. Turning times. The user is asked to supply the parental password at 
off the TV will also automatically restore all parental locks. step 172 if the user is trying to watch TV at a restricted time. 
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Similarly, if a channel lock exists, and the user is trying to 
tune to a locked channel, the user would be asked to supply 
the password at step 172. If the user is watching TV at an 
unrestricted time, the user may proceed to step 168 and may 
tune to the program, record the program and the like. 

If no TIME lock has been set, a step 160 checks for a 
rating/MPAA lock, as the ratings correspond to those set by 
Motion Pictures of America Association. If a rating lock has 
been set, a step 164 determines whether the program has a 
restricted rating. If so, the user is asked to supply the 
parental password at step 172. On the other hand, if there is 
no rating lock, a step 162 checks for a content/ATI KIBUTE 
lock. The system checks at step 166 whether the program 
contains restricted content, and if so, the user is asked to 
supply the parental password at step 172. A step 176 further 
checks whether the program has a V-chip classification if the 
program does not contain restricted content. If so, a step 178 
(details shown in FIG. 7) determines whether the user is 
trying to gain access to a program with restricted V-chip 
classifications. 

FIG. 5, which describes step 106 in greater detail, illus- 
trates a process flow chart for the operation of the purchase 
control feature. When a user tunes to a program, a step 200 
checks whether a purchase password has been established. If 
so, a step 204 checks whether the limit has been exceeded. 
Step 172 requests for the purchase password if the limit has 
been exceeded; if not, the system proceeds with the buying 
process at step 208. If step 200 determines that a purchase 
password has not been established, the system will also 
proceed with the buying process at step 208. 

FIG. 6, which describes step 172 in greater detail, illus- 
trates a process flow chart for verifying a password and 
limiting a user's number of tries in entering the purchase or 
parental password. At step 250, the user is asked to supply 
the applicable password. A step 252 receives the user's 
input, and a step 254 checks whether the password is in a 
proper format. If the password is improper, for e.g., it has too 
many characters, a step 256 displays a message informing 
the user the password is illegal. Step 252 is repeated, and the 
user may re-enter a proper password. As shown, the user 
may re-enter the password an infinite number of times if the 
password is rejected as being improper. 

Once the user has entered a proper password, a step 258 
verifies that the password entered is correct. If so, a step 260 
allows the user access to the locked program. However, 
when the password entered is incorrect, a step 262 tracks the 
number of times the user attempts to enter an incorrect 
password. A step 264 compares the count at 262 with the 
number 3. If the count at 262 is less than 3, a step 256 
displays the illegal password pop-up and the user may 
re-enter the password at step 252. If the user has attempted 
to enter a correct password more than three times, a step 266 
shows a pop-up informing the user there has been too many 
attempts to enter the password, and the user has to wait 
fifteen minutes before attempting to enter the password 
again. Steps 268 and 270 set the Flag, and start the fifteen 
minute restriction before allowing the user to re-enter a 
password. 

In a preferred embodiment, disconnecting the system 
from the power supply will not circumvent the fifteen 
minute restriction; instead, the user will have to wait longer 
to re-enter the password as the system resets the fifteen 
minute period when it is re-connected to the power supply. 
The system restricts the user to three attempts at entering the 
correct password to ensure the security of the password. 
Since an unauthorized user will preferably have to wait at 
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least 15 minutes after every three tries, the unauthorized user 
is not as likely to crack the password. 

FIG. 7, which describes step 178 in greater detail, illus- 
trates a process flow chart for determining whether a pro- 

5 gram has restricted V-chip classification, and whether the 
user should be allowed access. Since V-chip data comes 
from the video stream of a channel, one way to determine 
whether a program has restricted V-chip classification is to 
first tune to the channel to access the data. For example, the 

10 user may be watching channel 9, and desires to tune to 
channel 3. Referring to FIG. 7, if the system determines that 
the program on channel 3 has V-chip classification, a step 
300 saves the video and audio volume information of 
channel 9. The system determines at step 302 whether the 

15 user is changing channels from the TV screen or from within 
guide. If the user is changing channels from the TV screen, 
a step 304 puts a blue screen over the TV screen. 

Alternatively, where the user is changing channels from 
within the guide, a step 306 applies a blue border around the 

20 guide to block out parts of the screen that are not covered by 
the guide. At step 308, the system mutes the audio so the user 
may not hear the program. A step 310 tunes to the requested 
channel, which is channel 3 in this example, and a step 312 
reads the V-chip data from the video stream of the channel. 

25 A step 314 determines whether the V-chip classification is a 
restricted classification. If not, the user may tune to the 
program on channel 3. 1 However if the program has a 
restricted V-chip classification, the user is asked to supply 
the parental password at step 172. A step 316 checks that the 

30 user has supplied the correct parental password, if so, a step 
318 restores the audio volume of the channel (in this case, 
channel 3). Depending on whether the user was changing 
channels while within the TV screen or the guide, either step 
324 will remove the blue screen put on by step 304, or a step 

35 322 will clear the guide and the blue border applied by step 
306. If access was not verified at step 316, audio remains 
muted, and the blue screen or the blue border and the guide 
remains on the screen. The user may, however, attempt to 
access other channels/programs, which will be shown if they 

40 are unrestricted. 

In another embodiment, the system need not first tune to 
the channel to access V-chip data. Since V-chip rating data 
may be included in the data stream, and received in a similar 
manner as data regarding program title, description, and the 

45 like, the system may receive the V-chip rating data in 
advance, and store the data in a database. In this 
embodiment, the system may apply parental control without 
having to first tune to the channel to access V-chip data, as 
the system may simply retrieve the data from the database. 

50 Referring to the FT G. 7 example, the system may determine, 
while the user is still within channel 9, whether the program 
on channel 3 has V-chip classification by retrieving V-chip 
data information regarding the channel 3 program from the 
database. After retrieving this information, if the program 

55 has V-chip classification, the system may determine whether 
the V-chip classification is a restricted classification. If so, 
the parental password is requested, if not, the system tunes 
to the channel 3 program. Hence, this embodiment elimi- 
nates the need for the system to mute the audio and put up 

60 a blue screen or a blue border around the guide, as the 
system need not first tune to the channel. 

FIG. 8 illustrates a process flow chart for changing the 
parental control or purchase password. A step 350 requests 
for the password, and a step 352 receives the user password 

65 input. A step 354 checks whether the password is in proper 
form, if not, a step 356 displays an illegal password pop-up, 
and the user has an unlimited number of times to re-enter a 
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proper password at step 352. When the password entered is system displays a pop-up explaining to the user that all 

in proper form, a step 358 verifies that the password is in fact programs may be viewed free of restrictions if the user 

the correct password. A step 360 keeps count of the number removes the password and asks whether the user wishes to 

of times an incorrect password is entered. As shown by steps proceed. If the user decides to proceed at step 452, a step 454 

360 and 362, the user is given three attempts to enter a 5 requests that the user enters the password. If not, the user 

correct password. If after three attempts, the password exits the process. A step 456 receives the user input if the 

entered is still incorrect, a step 364 displays a "Too Many user decides to proceed, and a step 458 checks whether the 

Attempts" pop-up. The user has to wait fifteen minutes password is in proper form. If not, a step 460 displays an 

before the system will allow any further password input illegal password pop-up, and the user has an unlimited 

attempts, as steps 366 and 368 set the flag and start the 10 number of times to re-enter a proper password at step 456. 

fifteen minute restriction. As mentioned, the user preferably If the password entered is in proper form, a step 462 verifies 

may not circumvent the fifteen minute wait by disconnecting that the password is in fact the correct password. A step 464 

the system from the power supply. keeps count of the number of times an incorrect password is 

The user is allowed to change the old password and enter entered, 

a new password at step 370 if the user supplied the correct 15 As shown by steps 466, 460 and 456, the user is given 

password at step 352. A step 372 ensures that the new three attempts to enter a correct password. After three 

password is in proper form, if not, a step 374 displays an attempts, if the password entered is still incorrect, step 468 

illegal password pop-up, and the user has an unlimited displays a "Too Many Attempts" pop -up. The user has to 

number of times to re-enter a proper new password at step wait fifteen minutes before the system will allow any further 

370. If the new password entered is in proper form, the user 20 password input attempts, as steps 470 and 472 set the flag 

is requested to re-enter the new password at step 376 to and start the fifteen minute restriction. As mentioned, the 

confirm the new password entered is indeed the password user preferably may not circumvent the fifteen minute wait 

desired. At step 378, the system compares the password by disconnecting the system from the power supply. The 

entered at step 370 with the password entered at step 376. If user is allowed to remove the password at step 474 if the user 

the two passwords are different, the user is asked to re-enter 25 supplied the correct password at step 462. 

the new password again at step 376 to confirm the new The above description is illustrative and not restrictive, 

password entered is' the password desired, and step 378 Variations of the invention will become apparent to those 

again compares the passwords entered. skilled in the art upon review of this disclosure. The scope 

Steps 376 and 378 are repeated until the password entered of the invention should, therefore, be determined not with 

at step 376 matches the password entered at step 370. Or, the 30 reference to the above description, but instead should be 

user may exit the process, in which case, the password is determined with reference to the appended claims along 

unchanged. Alternatively, after step 378 made its with their full scope of equivalents, 

comparison, if password 370 is different from password 376, What is claimed is: 

steps 370-378 are repeated. This means that the user may 1. A method of exercising access control over television 

re-enter the new password at step 370 to ensure that the entry 35 programs comprising the steps of: 

at step 370 is correct, and reconfirm the password at step entering a criterion for blocking the television programs 

376. Step 378 will compare the two passwords, if they are from being viewed; 

the same a step 380 changes the old password to the new drying a phirality'of television program listings in a 

passwor . ^ guide format on a screen; 

FIG 9 illustrates a process flow chart for establishing the Qn6 of ^ ^ j d listi for ^ Qr 

parental control or purchase password. A step 400 requests recording ■ 

for the password, and a step 402 receives the user password . . 

input. At step 404, the system checks whether the password prompting a viewer to enter a password if the selected 

is in proper form, if not, a step 406 displays an illegal 45 P^gram meets the blocking criterion; 

password pop-up, and the user has an unlimited number of unblocking the selected program that meets the blocking 

times to re-enter a proper password at step 402. If the criterion so it can be viewed or recorded if the viewer 

password entered is in proper form, the user is requested to enters the password responsive to the prompt; 

re-enter the password at step 408 to confirm the password re-blocking the selected program if a different program is 

entered is indeed the password desired. A step 410 compares 5Q tuned to; and 

the password entered at step 402 with the password entered restoring the blocking criterion after the program is over 

at step 408. If the two passwords are different, the user is or me program is no longer tuned to. 

asked to re-enter the password again at step 408 to confirm 2. The method of claim 1, in which the step of entering a 

the password entered is the password desired, and step 410 criterion comprises: 

again compares the passwords entered. SJ ^pUymg on the screen a list of criteria if the viewer 

Steps 408 and 410 are repeated until the password entered enters the password responsive to the prompt; and 

at step 408 matches the password entered at step 402 Or, the sekctin ^ critcrk)n tQ entcr from mc ^ rf 

user may exit the process, in which case, a password is not 3 ^ q{ ^ j ^ which ^ of entcri , 

created. Alternatively, after step 410 made its comparison, if criterion comprises* 

password 402 is different from password 408, steps 402-410 60 , . ' 

are repeated. This means that the user may re-enter the <ksplaying on the screen a prompt to the viewer to enter 

password at step 402 to ensure that the entry at step 402 is a P 4 *^ 0 ™; 

correct, and re-confirm the password at step 408. A step 410 displaying on the screen a list of criteria if the viewer 

will compare the two passwords. If they are the same, a step enters the password responsive to the prompt; 

412 establishes the password as the current password, 6S selecting the criterion to enter from the list of criteria; 

FIG. 10 illustrates a process flow chart for removing the removing the list of criteria from the screen after the 

parental control or purchase password. At step 450, the criterion has been entered; and 
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preventing selection of another criterion until the pass- 
word is reentered. 

4. The method of claim 1, in which the step of entering a 
criterion enters a program rating. 

5. The method of claim 1, in which the step of entering a 5 
criterion enters a channel identification. 

6. The method of claim 5, further comprising the step of 
displaying a lock symbol next to the channel identification 
in the program listings. 

7. The method of claim 1, in which the step of entering a 10 
criterion enters a time period. 

8. The method of claim 1, in which the step of entering a 
criterion enters a spending limit for pay-per-view programs. 

9. The method of claim 1, further comprising the step of 
tuning to the selected program for viewing or recording 15 
without prompting the viewer to enter the password if the 
selected program does not meet the blocking criterion. 

10. The method of claim 1, in which the unblocking step 
comprises the step of unblocking all of the blocked pro- 
grams. 20 

11. The method of claim 1, in which the step of entering 
the password comprises verifying the password and prevent- 
ing the viewer from entering the password for a predeter- 
mined period of time if the password was entered incorrectly 
for a predetermined number of attempts. 25 

12. The method of claim 1, in which the password can be 
changed by the viewer. 

13. An apparatus for exercising access control over a 
television program comprising: 

a display screen, 30 
means for entering a criterion for blocking television 

programs from being viewed; 
means for displaying a plurality of television program 

listings in a guide format on the screen; 35 
means for selecting one of the displayed listings for 

viewing or recording; 
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means for prompting a viewer on the screen to enter the 
password if the selected program meets the blocking 
criterion; 

means for unblocking the selected program that meets the 
blocking criterion so it can be viewed or recorded if the 
viewer enters the password responsive to the prompt; 

means for re-blocking the selected program if a different 
program is tuned to; and 

means for restoring the blocking after the program is over 
or the program is no longer tuned to. 

14. The apparatus of claim 13, in which the means for 
entering a criterion comprises: 

means for displaying on the screen a list of criteria if the 
viewer enters the password responsive to the prompt; 

means for selecting the criterion to enter from the list of 
criteria; and 

means for restoring the blocking criterion after the pro- 
gram is over or the program is no longer tuned to. 

15. The apparatus of claim 13, in which the means for 
entering a criterion comprises: 

means for displaying on the screen a prompt to the viewer 

to enter a password; 
means for receiving and recognizing the password; 
means for displaying on the screen a list of criteria if the 

viewer enters the password responsive to the prompt; 
means for selecting the criterion to enter from the list of 

criteria; 

means for removing the list of criteria from the screen 
after the criterion has been entered; and 

means for preventing selection of another criterion until 
the password is reentered. 

***** 
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